Branch security method, device and equipment, storage medium and program product

Abstract

The invention provides a website security method and device, equipment, a storage medium and a program product, and relates to the field of artificial intelligence. The method comprises the following steps: under the condition that a network access control is unlocked for the first time on that day, acquiring identity information of an unlocking person, acquiring identity information of a first card punching person punching in a first preset duration range before and after unlocking, detecting whether a person enters a defense deployment area or not, identifying identity information of an entering person under the condition that the person enters, and sending the identity information of the entering person to the network access control unit; if the identity information of the unlocking person, the identity information of the first card punching person and the identity information of the entering person are matched and the current time is within a preset defense withdrawing time range, executing a defense withdrawing strategy; according to the method, automatic defense withdrawing of the control network point is realized, and the reliability and the safety of defense withdrawing are improved.

Description

Technical Field

[0001] The present application relates to the field of artificial intelligence, and in particular to a network security method, device, equipment, storage medium and program product. Background Art

[0002] Arming and disarming are two core operations in the financial institution security management system, which aims to protect the financial institution's branches from unauthorized access or potential threats. Arming refers to the process of starting a series of security measures during non-business hours, usually involving the activation of alarm systems, motion sensors, video surveillance equipment, and locking all entrances and exits, while disarming refers to removing these security measures before business starts so that employees can enter the work area normally and carry out daily business activities.

[0003] At present, the disarming operation of bank branches is carried out manually, and the specific process is that the staff enters the password of the security system under monitoring and controls the security system to perform the disarming operation. However, this manual disarming method has the problem of low security and reliability. Summary of the invention

[0004] The present application provides a network point security method, device, equipment, storage medium and program product to solve the problem of low security and reliability of existing network point security methods.

[0005] In a first aspect, the present application provides a network point security method, comprising:

[0006] When the branch access control is unlocked for the first time on the day, the identity information of the unlocker is obtained, and the identity information of the first clock-in person who clocks in at work within the first preset time range before and after the unlocking is obtained;

[0007] Detect whether someone enters the defense area, and identify the identity of the entrant if someone enters;

[0008] If the identity information of the unlocking person, the identity information of the first punching person and the identity information of the entering person match, and the current time is within the preset disarming time range, the disarming strategy is executed.

[0009] In a second aspect, the present application provides a network point security device, including:

[0010] An acquisition module is used to obtain the identity information of the person who unlocks the access control of the branch for the first time on the day, and obtain the identity information of the first person who clocks in to work within a first preset time range before and after the unlocking;

[0011] The detection module is used to detect whether someone enters the defense area and identify the identity information of the entrant if someone enters;

[0012] The control module is used to execute the disarming strategy when the identity information of the unlocking person, the identity information of the first punching person and the identity information of the entering person match and the current time is within a preset disarming time range.

[0013] In a third aspect, the present application provides an electronic device, including: a memory, a processor;

[0014] The memory stores computer-executable instructions;

[0015] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the network point security method described in the first aspect above.

[0016] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, they are used to implement the network point security method described in the first aspect above.

[0017] In a fifth aspect, the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the network security method described in the first aspect above.

[0018] The branch security method, device, equipment, storage medium and program product provided by the present application obtain the identity information of the unlocker when the branch access control is unlocked for the first time on the day, and obtain the identity information of the first person who punched in to work within a first preset time range before and after the unlocking, detect whether anyone enters the deployment area, and identify the identity information of the entrant when someone enters. If the identity information of the unlocker, the identity information of the first person who punched in and the identity information of the entrant match, and the current time is within the preset disarming time range, the disarming strategy is executed; this method realizes the automatic disarming of the control branch and improves the reliability and security of the disarming. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0020] Figure 1 Schematic diagram of the network security method provided for this application Figure 1 ;

[0021] Figure 2 Schematic diagram of the network security method provided for this application Figure 2 ;

[0022] Figure 3 A schematic diagram of the structure of the network security device provided for this application;

[0023] Figure 4 A schematic diagram of the structure of the electronic device provided in this application.

[0024] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Obviously, the described embodiments are part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0026] The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of the present invention and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in sequences other than those illustrated or described herein.

[0027] In the embodiments of the present application, the words "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0028] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use, processing, transmission, provision, disclosure and application of the relevant data comply with the relevant laws, regulations and standards of the relevant countries and regions, take necessary confidentiality measures, do not violate public order and good customs, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0029] In addition, this application involves conducting big data analysis of user information (including but not limited to personal biometrics, identity data, consumption data, asset data, electronic terminal operation data, etc.), and using artificial intelligence technology to make automated decisions, and making technical solutions that have a significant impact on personal rights and interests based on the results of automated decisions. The application provides users with corresponding operation entrances for them to choose to agree or reject the results of automated decisions; if the user chooses to reject, the expert decision-making process will be entered.

[0030] It should be noted that the branch security method, device, equipment, storage medium and program product of the present application can be used in the field of financial technology, and can also be used in any field other than the field of financial technology. The application field of the branch security method, device, equipment, storage medium and program product of the present application is not limited.

[0031] In the security management system of financial institutions, arming and disarming are two crucial links, which are aimed at protecting branches from unauthorized access and potential threats during non-business hours. Arming refers to the process of starting a series of protective measures when the branch closes, including activating the alarm system, installing motion sensors, starting video surveillance equipment, and ensuring that all entrances and exits are locked. Conversely, disarming is to remove these security measures before business starts so that employees can smoothly enter the work area and conduct business normally.

[0032] Currently, many bank branches still rely on manual methods to perform disarming operations. Specifically, staff need to enter the security system password under the supervision of surveillance cameras to trigger the system's disarming command. However, this manual operation mode has low security and reliability.

[0033] In view of this, the present application provides a network point security method, which obtains the identity information of the unlocker who unlocks the network point access control for the first time on the day, obtains the identity information of the clock-in person who punches in to work within a preset time period before and after the unlocking, and detects in real time whether anyone enters the defense area, and identifies the identity information of the entrant when someone enters is detected. When the identity information of the unlocker, the clock-in person and the entrant can be matched as the same staff member information, and the current time is within the preset disarming time range, the disarming strategy is executed; this method realizes the automatic disarming of the control network point, and improves the reliability and security of the disarming.

[0034] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0035] Figure 1Schematic diagram of the process of the network point security method provided in the embodiment of the present application Figure 1 The execution subject of this embodiment is, for example, a cloud service end connected to the network security system. Figure 1 As shown, the network point security method provided in this embodiment includes:

[0036] S101. When the branch access control is unlocked for the first time on the day, obtain the identity information of the person who unlocks the branch access control, and obtain the identity information of the first person who clocks in to work within a first preset time range before and after the unlocking.

[0037] When the system detects the first access unlock of the day, it automatically records the unlock event, and the identity information of the unlocker can be obtained through identity authentication methods such as access card, fingerprint recognition, facial recognition, iris recognition, etc. The first preset time range before and after the unlock can be 3 minutes, 5 minutes, 10 minutes before and after the access unlock time, etc. The identity information of the first puncher can be obtained, for example, through employee ID, identification code of the punching device, etc.

[0038] It is understandable that the staff may clock in before or after unlocking the branch access control. Therefore, the identity information of the clock-in person obtained here is the total time before and after the access control is unlocked, that is, the identity information of all clock-in persons within the first preset time range. The first clock-in person identity information can be one or more.

[0039] For example, when the access control is unlocked for the first time that day, the identity information of the first person who punched in to work within the first preset time range before and after the unlocking can be the identity information of the person who unlocked the access control; when two staff members come to work at the same time, one punches in first and the other unlocks the access control and the access control is unlocked for the first time that day, the identity information of the first person who punched in at this time includes: the identity information of the person who unlocked the access control, and the identity information of the other staff member who punched in to work.

[0040] S102, detecting whether anyone enters the defense area, and identifying the identity information of the entrant if someone enters.

[0041] Among them, the defense area refers to the area inside the branch that is set to require close monitoring and protection. The defense area may include, for example: safe area, counter service area, self-service area, office area, etc. These areas have very high security requirements, so in the defense state, it will continue to detect whether anyone enters. If someone enters any of the above defense areas, the identity information of the entrant will be identified.

[0042] In a possible implementation, a human body sensor may be used to detect whether a person enters the defense area, and if a person enters, an image is captured by a camera;

[0043] The image is input into a pre-trained image recognition model to obtain the identity information of the person entering as output by the image recognition model.

[0044] Among them, human body sensors such as infrared sensors, ultrasonic sensors or motion sensors can be used to monitor whether someone enters the defense area. These sensors sense heat or motion changes, trigger the camera linked to the sensor to start, and take images of the defense area. The original image obtained from the camera needs to be pre-processed, such as resizing, graying, denoising, etc., and then the image is analyzed by a pre-trained image recognition model to extract feature information, and then a face recognition algorithm and a pre-established identity database are used to determine the identity information of the entrant. The identity database contains facial feature information of all personnel in the network.

[0045] The image recognition model can be based on a convolutional neural network model, which automatically learns the feature representation in the input image through a series of convolutional layers, pooling layers and fully connected layers, and for face recognition tasks, the image recognition model can effectively capture the key features of the facial structure of the person to be recognized, such as the positions of the nose, eyes, mouth, etc. and the relative distances between them.

[0046] The training process of the image recognition model includes: collecting a large number of labeled image data sets, including front and side face photos at various angles and lighting conditions, and preprocessing the image data in the image data sets, and inputting the preprocessed images into the convolutional neural network model for training to obtain a trained image recognition model.

[0047] When using the image recognition model to determine the identity information of a person entering, the image to be identified can be input into the image recognition model, and the facial features in the image to be identified will be converted into a feature vector. After that, the feature vector will be compared with each feature vector in the identity database, and the Euclidean distance will be used to evaluate the similarity between the two feature vectors. If the distance between the feature vector to be identified and an existing feature vector is lower than a preset threshold, it is considered that the two belong to the same person.

[0048] In an embodiment of the present application, when an existing feature vector is matched and a preset threshold is met, the image recognition model can output the corresponding identity information; if no matching item meets the requirements, the image recognition result is marked as "unknown" or "unauthorized visitor" and the corresponding security measures are triggered.

[0049] Optionally, regardless of whether the identity information of the person entering the defense area is successfully matched, the relevant information of the recognition operation is recorded, including timestamp, image information, matching results, etc.

[0050] S103: If the identity information of the unlocking person, the identity information of the first punching person, and the identity information of the entering person match, and the current time is within the preset disarming time range, the disarming strategy is executed.

[0051] The preset disarming time range refers to a preset time range before the business hours of the outlet, for example, 1 hour before business hours.

[0052] It can be understood that only when the identity information of the person who unlocked the branch access for the first time on the day, the identity information of the first person to punch in, and the identity information of the person entering the armed area can be matched to the information of the same employee and the current time is within the preset disarming time range, the security system is allowed to switch from the "armed" state to the "disarmed" state, that is, normal entry and exit are allowed without triggering an alarm.

[0053] In one possible case, the identity information of the person who unlocks the door, the only first person to punch in, and the only person to enter the defense area is the same person. At this time, it is only necessary to determine whether the current time meets the preset disarming time condition, and if the current time meets the disarming time condition, control the security system to execute the disarming strategy.

[0054] In another possible situation, when there are multiple first check-in person identity information and / or multiple entrant person identity information, if the unlocking person identity information matches any one of the multiple first check-in person identity information and any one of the multiple entrant person identity information, then it is determined that the unlocking person identity information, the first check-in person identity information and the entrant person identity information match.

[0055] Here, the situation where there are multiple identity information of the first clock-in person means that there are multiple people who clock in for work within the first preset time period before and after the unlocking person unlocks the access control; the situation where there are multiple identity information of the entering person means that there are multiple people who enter the defense area together; when the identity information of the unlocking person matches any one of the multiple first clock-in persons and matches any one of the multiple entering persons, the identity information is considered to be matched successfully; otherwise, even if the identity information of the unlocking person matches the identity information of at least one first clock-in person or the identity information of at least one entering person, the identity information match fails and the defense strategy continues to be executed.

[0056] In the embodiment of the present application, the armed state is maintained during non-business hours, and the disarming strategy is executed only when the disarming conditions are met and the current time is within the preset disarming time range, so that the alarm device can be effectively prevented from being accidentally triggered. In addition, by limiting the time range of disarming, a higher security level can be maintained during high-risk periods (such as late at night or holidays) to prevent unauthorized persons from taking advantage of the opportunity of system disarming to carry out illegal activities.

[0057] The branch security method provided in the embodiment of the present application obtains the identity information of the person who unlocks the branch access control when it is unlocked for the first time on the day, and obtains the identity information of the first person who punches in to work within a first preset time range before and after the unlocking, detects whether anyone enters the defense area, and identifies the identity information of the person entering when someone enters. If the identity information of the person who unlocks the branch access control, the identity information of the first person who punches in, and the identity information of the person entering match, and the current time is within the preset disarming time range, the disarming strategy is executed. This method realizes the automatic disarming of the control branch and improves the reliability and security of the disarming.

[0058] Figure 2 Schematic diagram of the network security method provided for this application Figure 2 ,like Figure 2 As shown, in this embodiment Figure 1 Based on the embodiment, the network point security method is described in detail. The network point security method provided by this embodiment includes:

[0059] S201. When the branch access control is locked, obtain the identity information of the person who locked the door, and obtain the identity information of the second person who clocked in and out within a first preset time range before and after the door was locked.

[0060] When the system detects that the door is unlocked, it automatically obtains the identity information of the unlocker, which can be obtained through identity authentication methods such as access card, fingerprint recognition, facial recognition, iris recognition, etc. The identity information of the second puncher can be obtained, for example, through employee ID, identification code of the punching device, etc.

[0061] It is understandable that the staff may clock in before or after locking the access control of the Internet point. Therefore, the identity information of the clock-in person obtained here is the total time before and after the access control is locked, that is, the identity information of all clock-in persons within the first preset time range. The second clock-in person identity information can be one or more.

[0062] For example, when the access control is locked, the identity information of the second person who clocks in and out within the first preset time range before and after the lock can be the identity information of the person who locked the door; when two staff members leave work at the same time, one clocks in first and the other locks the access control, the identity information of the second person who clocks in includes: the identity information of the person who locked the door, and the identity information of the other staff member who clocks out.

[0063] Optionally, after the branch access control is locked, a first prompt message is sent to the terminal of the person who locked the door, and the prompt message is used to prompt the person who locked the door to clock in. This is to ensure that the clock-in information of the person who locked the door can be successfully obtained during the subsequent matching of identity information, so as to avoid the situation where the identity matching fails because the employee forgets to clock in after locking the door, and the door cannot be deployed normally.

[0064] For example, after obtaining the fingerprint information of the locked person, the access control system sends the fingerprint information to the cloud server. The cloud server matches the fingerprint information in the identity database, and after confirming the identity information of the locked employee, it searches for the employee's terminal device information in the identity database and uses instant communication tools such as SMS, email, and mobile application notifications to send prompt information to the terminal device of the locked person.

[0065] S202, detecting whether there is anyone in the defense area. If there is no one in the defense area, if the identity information of the locker matches the identity information of the second clock-in person, the defense strategy is executed.

[0066] Among them, sensors (such as infrared sensors, ultrasonic sensors, etc.) or cameras combined with image recognition technology are used to monitor whether there are people in the defense area, ensuring that there are no people staying in the area before the defense strategy is executed to avoid false triggering of the alarm system.

[0067] In one possible implementation, there is only one second person who clocks in and out of get off work within a first preset time period before and after locking the door, and the person who locked the door and this unique second person who clocks in are the same employee. At this time, the fingerprint information of the person who locked the door uploaded by the access control system can be compared with the fingerprint information of the second person who clocks in pre-stored in the identity database. If the verification is successful, it is confirmed that the identity information of the person who locked the door matches the identity information of the second person who clocks in, and the security system is controlled to execute the deployment strategy.

[0068] In another possible implementation, when there are multiple second card-punching person identity information, if the locking person identity information matches any one of the multiple second card-punching person identity information, it is determined that the locking person identity information matches the second card-punching person identity information.

[0069] It is understandable that if there are multiple people clocking in and out within the first preset time range before and after locking, then there will be multiple identity information of the second clocking-in persons. At this time, as long as it can be determined that the identity information of the person locking the door matches any of the identity information of the multiple second clocking-in persons, the deployment strategy can be executed.

[0070] Optionally, after a second preset time period after the network point access is locked, if the deployment strategy is not executed, a second prompt message is sent to the preset personnel terminal, and the second prompt message is used to prompt that the network point is not deployed.

[0071] For example, the person who locked the door leaves the branch after locking it but forgets to punch in. Therefore, the person's punch-in information cannot be obtained within the first preset time before and after the door is locked, resulting in the inability to perform identity matching later, and then causing deployment failure, which may easily cause safety hazards. Therefore, after the second preset time after the door is locked, if the deployment strategy has not been executed, an alarm message indicating that the door is not deployed will be sent to the security manager closest to the branch.

[0072] The branch security method provided in the embodiment of the present application obtains the identity information of the person who locked the branch access when the branch access is locked, and obtains the identity information of the second person who clocked in and out within a first preset time range before and after the branch access is locked, detects whether there is anyone in the defense area, and executes the defense strategy when there is no one in the defense area and the identity information of the person who locked the branch matches the identity information of the second person who clocked in. This method realizes automatic step-by-step defense of the control branch and improves the reliability and security of the defense.

[0073] Figure 3 The schematic diagram of the structure of the network security device provided for this application is as follows: Figure 3 As shown, the network point security device 300 provided in this embodiment includes:

[0074] The acquisition module 301 is used to acquire the identity information of the unlocker when the branch access control is unlocked for the first time on the day, and acquire the identity information of the first clock-in person who clocks in at work within a first preset time range before and after the unlocking;

[0075] The detection module 302 is used to detect whether a person enters the defense area, and identify the identity information of the person if a person enters;

[0076] The control module 303 is used to execute the disarming strategy when the identity information of the unlocking person, the identity information of the first punching person and the identity information of the entering person match and the current time is within a preset disarming time range.

[0077] In some embodiments, the apparatus further comprises: a processing module 304;

[0078] The detection module 302 is also used to detect whether a person enters the defense area through a human body sensor, and if a person enters, take an image through a camera;

[0079] The processing module 304 is used to input the image into a pre-trained image recognition model to obtain the identity information of the entrant output by the image recognition model.

[0080] In some embodiments, the processing module 304 is also used to determine that the unlocking person identity information, the first check-in person identity information and the entrant identity information match when there are multiple first check-in person identity information and / or there are multiple entrant identity information, and when the unlocking person identity information matches any one of the multiple first check-in person identity information and any one of the multiple entrant identity information.

[0081] In some embodiments, the acquisition module 301 is further used to acquire the identity information of the person who locked the door when the door of the branch is locked, and acquire the identity information of the second person who clocked in and out within a first preset time range before and after the door was locked;

[0082] The detection module 302 is also used to detect whether there is anyone in the defense area;

[0083] The control module 303 is further configured to execute the defense strategy when no one is in the defense area and when the identity information of the locker matches the identity information of the second clock-in person.

[0084] In some embodiments, the apparatus further comprises: a sending module 305;

[0085] The sending module 305 is used to send a first prompt message to the terminal of the person who locked the door after the branch door is locked, and the prompt message is used to prompt the person who locked the door to clock out.

[0086] In some embodiments, the processing module 304 is also used to determine that the locking person identity information matches the second clock-in person identity information when there are multiple second clock-in person identity information and the locking person identity information matches any one of the multiple second clock-in person identity information.

[0087] In some embodiments, the sending module 305 is also used to send a second prompt message to the preset personnel terminal after a second preset time after the branch access is locked, if the deployment strategy is not executed, and the second prompt message is used to prompt that the branch is not deployed.

[0088] Figure 4 This is a schematic diagram of the structure of the electronic device provided in this application. Figure 4 As shown, the present application provides an electronic device, the electronic device 400 includes: a receiver 401, a transmitter 402, a processor 403 and a memory 404.

[0089] Receiver 401, for receiving instructions and data;

[0090] A transmitter 402, used for sending instructions and data;

[0091] Memory 404, for storing computer-executable instructions;

[0092] The processor 403 is used to execute the computer-executable instructions stored in the memory 404 to implement the various steps executed by the network point security method in the above embodiment. For details, please refer to the relevant description in the above network point security method embodiment.

[0093] Optionally, the memory 404 may be independent or integrated with the processor 303 .

[0094] When the memory 404 is independently provided, the electronic device further includes a bus for connecting the memory 404 and the processor 403 .

[0095] In the above embodiments, it should be understood that the processor can be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in the invention can be directly implemented as a hardware processor, or can be implemented by a combination of hardware and software modules in the processor.

[0096] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (NVM), such as at least one disk storage.

[0097] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of this application is not limited to only one bus or one type of bus.

[0098] The present application also provides a computer program product, including a computer program, which implements the above-mentioned network security method when executed by a processor.

[0099] The present application also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the above-mentioned network security method is implemented.

[0100] The above-mentioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0101] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (Application Specific Integrated Circuits, referred to as: ASIC). Of course, the processor and the readable storage medium can also exist in the device as discrete components.

[0102] The division of units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interface, device or unit, which can be electrical, mechanical or other forms.

[0103] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0104] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0105] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0106] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0107] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present invention is intended to cover any variations, uses or adaptations of the present invention, which follow the general principles of the present invention and include common knowledge or customary technical means in the art not disclosed by the present invention, are not limited to the precise structure described above and shown in the drawings, and may be modified and changed in various ways without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims

1. A network point security method, characterized in that: include: When the branch access control is unlocked for the first time on the day, the identity information of the unlocker is obtained, and the identity information of the first clock-in person who clocks in at work within the first preset time range before and after the unlocking is obtained; Detect whether someone enters the defense area, and identify the identity of the entrant if someone enters; If the identity information of the unlocking person, the identity information of the first punching person and the identity information of the entering person match, and the current time is within the preset disarming time range, the disarming strategy is executed.

2. The method according to claim 1, characterized in that The detection network point lobby defense area is to detect whether someone enters, and if someone enters, identify the identity information of the entrant, including: Detecting whether a person has entered the defense area by using a human body sensor, and capturing an image by using a camera when detecting that a person has entered; The image is input into a pre-trained image recognition model to obtain the identity information of the person entering the image output by the image recognition model.

3. The method according to claim 1, characterized in that: Also includes: In the case where there are multiple first check-in person identity information and / or multiple entry person identity information, if the unlocking person identity information matches any one of the multiple first check-in person identity information and any one of the multiple entry person identity information, it is determined that the unlocking person identity information, the first check-in person identity information and the entry person identity information match.

4. The method according to any one of claims 1 to 3, characterized in that: Also includes: When the branch access control is locked, the identity information of the person who locked the door is obtained, and the identity information of the second person who clocked in and out within the first preset time range before and after the door was locked is obtained; Detect whether there is anyone in the defense area. When there is no one in the defense area, if the identity information of the locker matches the identity information of the second clock-in person, execute the defense strategy.

5. The method according to claim 4, characterized in that Also includes: After the branch access is locked, a first prompt message is sent to the terminal of the person who locked the door, and the prompt message is used to prompt the person who locked the door to clock out after get off work.

6. The method according to claim 4, characterized in that Also includes: In the case that there are multiple second card-punching person identity information, if the locking person identity information matches any one of the multiple second card-punching person identity information, it is determined that the locking person identity information matches the second card-punching person identity information.

7. The method according to claim 4, characterized in that Also includes: After a second preset time after the network point access is locked, if the deployment strategy is not executed, a second prompt message is sent to the preset personnel terminal, and the second prompt message is used to prompt that the network point is not deployed.

8. A network point security device, characterized in that: include: An acquisition module is used to obtain the identity information of the person who unlocks the access control of the branch for the first time on the day, and obtain the identity information of the first person who clocks in to work within a first preset time range before and after the unlocking; The detection module is used to detect whether someone enters the defense area and identify the identity information of the entrant if someone enters; The control module is used to execute the disarming strategy when the identity information of the unlocking person, the identity information of the first punching person and the identity information of the entering person match and the current time is within a preset disarming time range.

9. An electronic device, characterized in that: include: Memory; processor; Wherein, the memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the network point security method according to any one of claims 1-7.

10. A computer storage medium, characterized in that: The computer storage medium stores computer executable instructions, and when the computer executable instructions are executed by the processor, they are used to implement the network point security method according to any one of claims 1 to 7.

11. A computer program product, characterized in that It comprises a computer program, which, when executed by a processor, implements the network point security method as described in any one of claims 1 to 7.

Images